MAL-2025-69202 Malicious code in logical-coffee-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36840e14eb06b73629df8f2da5139f5bee9627b9047a9353e14067a7e52c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69498 Malicious code in muhui0222 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5f5037e6dbb1a2c900ebe9e9e64d910f6aaee8a2124e635daf71cb50008a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69848 Malicious code in payable-salmon-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7536737b1f08db227ce6ea8fab6eedc8ca99ab4f17b0ec66f0d9a051ea550e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69734 Malicious code in optimistic-cyan-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 337c04fca762a8467ad90d660a8de36858da1694d0e2f4c3ab139d99891f25b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68952 Malicious code in interesting-jade-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1b619ad93b0c370c1389bb194e4abab739d4c81c28a849bdbc0a4710c6a97c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66956 Malicious code in bewildered-rose-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a58f77e32fdc6eb95a1a2a81fab398e5fa00a338913b8dedfd48553b3fda475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless-tan-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62aa43b338e7dbe17c860b741ded69cf006bc0167c992c7ed2a028ef5da4787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70022 Malicious code in probable-amber-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaddb09247abb655c96fd5126cb237aaac1cd21443bf87f766cd58c6706aa242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68499 Malicious code in gastric-moccasin-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e6f942d8fbf7308e93279ef1a7a10e6eca5810a76ce074acfdfa3c4c6abcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68163 Malicious code in existing-purple-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6b4be112198f0e21333fcb146b8759831724822f1f94ae72d6fc60283c0d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-serabi3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1035ded713f6033b7556466d56f56780f275a37f149ad7ab551fdc8b8bc777f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in architectural_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c74173ff04b8a461d1ab136a475cb9c8520f592711a7d6cc762c26e5e51219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-lapis12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5579b298df2e13904af3ebd64aabecdbb7a0c6905ba6d9f8dfb67d48180b430d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-sate83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a00439cc21cd5939aaffcd25459a0e13d87844512620da581e9d771bd6d5278d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-lapis83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca19c17a6a49e1b55b08a828808efed48b1b6b9a52b785c942b8c0b1f91d24a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-tongseng52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb4c6e552e0c19ebcc0b50edb5f244a07907ec00c95852236b66b7548865070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in doubtful_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a2af052d2ac124af91acd9aa2688babd2840f76db3a82021e1eee166a78103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-gulai9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df4309d07c7da2406d877482fe74167fdb38dac69887bf0f982e8d0b1177863a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-rujaksoto11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7784c7b3a2782ed9b0d4dbb84314cb7db8f0be1ccc3b0fcd9edf01ae824b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-bakwan40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5952f68803d03f942125ae80bfe381ca8c214e875ae96f894d29f659400951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...